Malicious code in tunis-kit-bogavowi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b007cb22d1aa3da6579b4f3b05a3b35f842ec54564e0efbc8fee0998e1b68fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185349 Malicious code in unise-kit-bogv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92347916918f56164ae183eb2603fd3163d27cf2d58caa6aac7879824f88797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogavfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4540878abcde8a4b80055452ef5f0dc8932906cf9ca5d4261b0a84d4841b49a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogavofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4e283711c125bb09d5cf7148d707131ad945d8dc6fb2d92dc550e5082d880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185336 Malicious code in unise-kit-bogavfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4540878abcde8a4b80055452ef5f0dc8932906cf9ca5d4261b0a84d4841b49a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185258 Malicious code in tunis-kit-bogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfc9da885c525dd8219ad6b16c3b0932ac1231e343c6a06a0f55dc13ab8b444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185341 Malicious code in unise-kit-bogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c64805fe2b37966b2797bfdde96f85332ed5ccc73aaeb1589e2d993ce821852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bograttipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8992c24471b013c309218af3a24dda0509345d27707497ca3d7302c37e89045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185265 Malicious code in tunis-kit-gahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a84de994ae4925e86eee873c3e8b523aae9ac07745ccb7ca2ee9b2f086cd403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185343 Malicious code in unise-kit-bograia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba6981afae6474aac8dbbba6bc8bfed5a8c515c75ae13b35a73805fed9038a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185278 Malicious code in tunis-kit-gai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3635063c3c90ec7a0c7498b286e89c62934930e44921984b7282bc085ec9aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185259 Malicious code in tunis-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57898fef6929070fe1a668ad66a7e0eac73eccbffb35ab0ba2140f5b23e5789b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185266 Malicious code in tunis-kit-gahuadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8592c11f2958f10cfc3205c12709579c98be9f0a7c9dd01e866a513bf0afd907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185261 Malicious code in tunis-kit-bogavoaawi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d99e8d931079d4450f0851d04c9e1d1a1305994dd874be6d31015c0014c6e5bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61830

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

EUVD-2025-131909

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

The vulnerability of the Compiler component of the Oracle GraalVM for JDK allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Compiler component of the Oracle GraalVM for JDK lies in the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

EUVD-2025-93390

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

CVE-2025-61830

Adobe Pass (Android SDK) versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability that allows bypass of security controls to read/write data. Exploitation requires user interaction (victim installs a malicious SDK). The issue is discussed across multiple advisories (CVE...

PT-2025-46518

Name of the Vulnerable Software and Affected Versions Adobe Pass versions 3.7.3 and earlier Description An Incorrect Authorization issue exists in Adobe Pass. An attacker could bypass security measures and gain unauthorized read and write access. Exploitation requires user interaction, specifical...